Tumbleweed Offers a Secure Transparent Email Solution

Server-based Tumbleweed Secure Redirect centrally sets and controls security policies to safely deliver Internet emails; no end user software or training is required

REDWOOD CITY, CA - March 21, 2001 - Tumbleweed® Communications Corp. (Nasdaq:TMWD), a leading provider of mission critical messaging solutions, today announced Tumbleweed Secure RedirectT, software that integrates with existing email networks at the server level to secure communications automatically. Based on policies IT managers define, Tumbleweed Secure Redirect automatically encrypts and delivers messages over the Internet to anyone with an email address and Web browser.

Tumbleweed Secure Redirect uses a policy engine to scan email that end users create using their normal email accounts. IT managers configure the policy engine to select which messages should be delivered via a secure channel rather than via the company's normal Internet email channel. For example, a policy can be set to send every email addressed to a certain domain name-such as a company's outside accounting firm-over Tumbleweed's secure channel. Tumbleweed Secure Redirect then transparently enforces the policies.

"Tumbleweed Secure Redirect takes the guesswork out of communications security, which is vital as more and more business is transacted via email," said Jeffrey C. Smith, chairman and CEO, Tumbleweed Communications Corp. "IT managers set policies to control which messages must travel over a secure channel, and they don't have to install or maintain any new desktop software. Tumbleweed provides a safety net - end users don't have to change email software, add security technology, or even remember to comply with their company's secure communications policies. They simply use the email they use every day and Tumbleweed Secure Redirect takes care of the rest. IT managers don't have to worry about whether end users comply because policies are enforced automatically, at the server, under the IT manager's control."

Tumbleweed Secure Redirect leverages the policy engine included in Tumbleweed Messaging Management System (MMS™). Tumbleweed MMS is a set of email management products and services that enables organizations to set policies to apply content control, encryption, access control, attachment management, virus scanning and digital signature policies to Internet communications that are administered centrally and universally across an enterprise. Tumbleweed Secure Redirect uses the MMS policy engine to select messages for secure delivery and then automatically routes those messages to Tumbleweed Integrated Messaging ExchangeT, a platform and set of applications for creating secure email channels between a business and its customers, partners and suppliers.

About Tumbleweed
Tumbleweed Communications Corp. Tumbleweed Communications (NASDAQ: TMWD) is a leading provider of mission critical messaging solutions that enable organizations to manage and secure online business communications and processes. Tumbleweed's customers use the company's solutions to define secure communication networks, to centrally control and monitor the corporate communications stream and to create a foundation for automated preparation and secure Internet delivery of sensitive business information. Companies that rely on Tumbleweed Communications solutions include American Express, Chase Manhattan Bank, Chevron, Datek Online, the European Union's Joint Research Council, FDA, John Deere, Merrill Lynch, Nike, Northern Trust, NTT, Salomon Smith Barney, Travelers, United Parcel Service, and seven of the world's largest postal services. Tumbleweed Communications was founded in 1993 and is headquartered in Redwood City, CA.

-Except for the historical information contained herein, the matters discussed in this press release may constitute forward-looking statements that involve risks and uncertainties that could cause actual results to differ materially from those projected, particularly with respect to the security features of Tumbleweed's products and the activities of any third party. In some cases, forward-looking statements can be identified by terminology such as "may," "will," "should," "potential," "continue," "expects," "anticipates," "intends," "plans," "believes," "estimates," and similar expressions. For further cautions about the risks of investing in Tumbleweed, we refer you to the documents Tumbleweed files from time to time with the Securities and Exchange Commission, particularly Tumbleweed's Form 10-K filed March 30, 2001 and Form 10-Q filed November 13, 2001. Tumbleweed assumes no obligation to update information contained in this press release.